VYPR
← Apple Inc.

Vendor CVEs

Apple Inc.

All CVEs

9,260 total · sorted by risk
  • CVE-2018-4216MedApr 3, 2019
    Apple Inc.
    iOS
    risk 0.36cvss 5.5epss 0.01

    A logic issue existed in the handling of call URLs. This issue was addressed with improved state management. This issue affected versions prior to iOS 11.4.1.

  • CVE-2018-4178MedApr 3, 2019
    Apple Inc.
    macOS High Sierra
    risk 0.36cvss 5.5epss 0.00

    A permissions issue existed in which execute permission was incorrectly granted. This issue was addressed with improved permission validation. This issue affected versions prior to macOS High Sierra 10.13.4.

  • CVE-2019-6231MedMar 5, 2019
    Apple Inc.
    tvOS
    risk 0.36cvss 5.5epss 0.01

    An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A malicious application may be able to read restricted memory.

  • CVE-2019-6220MedMar 5, 2019
    Apple Inc.
    macOS
    risk 0.36cvss 5.5epss 0.01

    An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Mojave 10.14.3. An application may be able to read restricted memory.

  • CVE-2018-4256MedJan 11, 2019
    Apple Inc.
    macOS
    risk 0.36cvss 5.5epss 0.00

    In macOS High Sierra before 10.13.5, an out-of-bounds read was addressed with improved input validation.

  • CVE-2018-4255MedJan 11, 2019
    Apple Inc.
    macOS
    risk 0.36cvss 5.5epss 0.00

    In macOS High Sierra before 10.13.5, an out-of-bounds read was addressed with improved input validation.

  • CVE-2018-4181MedJan 11, 2019
    Apple Inc.
    macOS
    risk 0.36cvss 5.5epss 0.00

    In macOS High Sierra before 10.13.5, an issue existed in CUPS. This issue was addressed with improved access restrictions.

  • CVE-2018-4179MedJan 11, 2019
    Apple Inc.
    macOS
    risk 0.36cvss 5.5epss 0.00

    In macOS High Sierra before 10.13.4, there was an issue with the handling of smartcard PINs. This issue was addressed with additional logic.

  • CVE-2018-4253MedJun 8, 2018
    Apple Inc.
    macOS
    risk 0.36cvss 5.5epss 0.01

    An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "AMD" component. It allows local users to bypass intended memory-read restrictions or cause a denial of service (out-of-bounds read of kernel memory) via a crafted app.

  • CVE-2018-4251MedJun 8, 2018
    Apple Inc.
    macOS
    risk 0.36cvss 5.5epss 0.01

    An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Firmware" component. It allows attackers to modify the EFI flash-memory region that a crafted app that has root access.

  • CVE-2018-4235MedJun 8, 2018
    Apple Inc.
    watchOS
    risk 0.36cvss 5.5epss 0.00

    An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Messages" component. It allows local users to perform impersonation attacks…

  • CVE-2018-4226MedJun 8, 2018
    Apple Inc.
    iTunes
    risk 0.36cvss 5.5epss 0.01

    An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. watchOS before 4.3.1 is affected. The issue involves the "Security" component.…

  • CVE-2018-4225MedJun 8, 2018
    Apple Inc.
    iTunes
    risk 0.36cvss 5.5epss 0.01

    An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. watchOS before 4.3.1 is affected. The issue involves the "Security" component.…

  • CVE-2018-4224MedJun 8, 2018
    Apple Inc.
    iTunes
    risk 0.36cvss 5.5epss 0.01

    An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue…

  • CVE-2018-4223MedJun 8, 2018
    Apple Inc.
    watchOS
    risk 0.36cvss 5.5epss 0.00

    An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Security" component. It allows local users to bypass intended restrictions on…

  • CVE-2018-4198MedJun 8, 2018
    Apple Inc.
    watchOS
    risk 0.36cvss 5.5epss 0.01

    An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "UIKit" component. It allows remote attackers to cause a denial of service via…

  • CVE-2018-4171MedJun 8, 2018
    Apple Inc.
    macOS
    risk 0.36cvss 5.5epss 0.01

    An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Bluetooth" component. It allows attackers to obtain sensitive kernel memory-layout information via a crafted app that leverages device properties.

  • CVE-2018-4159MedJun 8, 2018
    Apple Inc.
    macOS
    risk 0.36cvss 5.5epss 0.01

    An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Graphics Drivers" component. It allows attackers to bypass intended memory-read restrictions via a crafted app.

  • CVE-2018-4141MedJun 8, 2018
    Apple Inc.
    macOS
    risk 0.36cvss 5.5epss 0.01

    An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Intel Graphics Driver" component. It allows attackers to bypass intended memory-read restrictions via a crafted app.

  • CVE-2018-4173MedApr 13, 2018
    Apple Inc.
    macOS
    risk 0.36cvss 5.5epss 0.01

    An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. The issue involves the "Status Bar" component. It allows invisible microphone access via a crafted app.

  • CVE-2018-4176MedApr 3, 2018
    Apple Inc.
    macOS
    risk 0.36cvss 5.5epss 0.01

    An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "Disk Images" component. It allows attackers to trigger an app launch upon mounting a crafted disk image.

  • CVE-2018-4138MedApr 3, 2018
    Apple Inc.
    macOS
    risk 0.36cvss 5.5epss 0.01

    An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "NVIDIA Graphics Drivers" component. It allows attackers to bypass intended memory-read restrictions via a crafted app.

  • CVE-2018-4112MedApr 3, 2018
    Apple Inc.
    macOS
    risk 0.36cvss 5.5epss 0.02

    An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "ATS" component. It allows attackers to obtain sensitive information by leveraging symlink mishandling.

  • CVE-2018-4104MedApr 3, 2018
    Apple Inc.
    tvOS
    risk 0.36cvss 5.5epss 0.01

    An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read…

  • CVE-2018-4093MedApr 3, 2018
    Apple Inc.
    watchOS
    risk 0.36cvss 5.5epss 0.01

    An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read…

  • CVE-2018-4084MedApr 3, 2018
    Apple Inc.
    macOS
    risk 0.36cvss 5.5epss 0.02

    An issue was discovered in certain Apple products. macOS before 10.13.3 is affected. The issue involves the "Wi-Fi" component. It allows attackers to bypass intended memory-read restrictions via a crafted app.

  • CVE-2017-7173MedApr 3, 2018
    Apple Inc.
    Mac OS X
    risk 0.36cvss 5.5epss 0.01

    An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app.

  • CVE-2017-7075MedApr 3, 2018
    Apple Inc.
    Iphone OS
    risk 0.36cvss 5.5epss 0.00

    An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Notes" component. It allows local users to obtain sensitive information by reading search results that contain locked-note content.

  • CVE-2017-7003MedApr 3, 2018
    Apple Inc.
    tvOS
    risk 0.36cvss 5.5epss 0.01

    An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "CoreText" component. It allows remote attackers to cause a denial of…

  • CVE-2017-6976MedApr 3, 2018
    Apple Inc.
    Iphone OS
    risk 0.36cvss 5.5epss 0.01

    An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Sandbox Profiles" component. It allows attackers to bypass intended access restrictions (for iCloud user records) via a crafted app.

  • CVE-2017-13851MedApr 3, 2018
    Apple Inc.
    macOS
    risk 0.36cvss 5.5epss 0.00

    An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "DesktopServices" component. It allows local users to bypass intended access restrictions on home folder files.

  • CVE-2017-13839MedApr 3, 2018
    Apple Inc.
    macOS
    risk 0.36cvss 5.5epss 0.00

    An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "Spotlight" component. It allows local users to see results for other users' files.

  • CVE-2017-13806MedApr 3, 2018
    Apple Inc.
    Profiles
    risk 0.36cvss 5.5epss 0.01

    An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Profiles" component. It does not enforce the configuration profile's settings for whether pairings are allowed.

  • CVE-2014-8130MedMar 12, 2018
    LibTIFF
    Libtiff
    risk 0.36cvss 6.5epss 0.04

    The _TIFFmalloc function in tif_unix.c in LibTIFF 4.0.3 does not reject a zero size, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image that is mishandled by the TIFFWriteScanline function in…

  • CVE-2017-7113MedNov 13, 2017
    Apple Inc.
    Iphone OS
    risk 0.36cvss 5.5epss 0.00

    An issue was discovered in certain Apple products. iOS before 11.1 is affected. The issue involves the "UIKit" component. It allows attackers to bypass intended read restrictions for secure text fields via vectors involving a focus-change event.

  • CVE-2017-13842MedNov 13, 2017
    Apple Inc.
    macOS
    risk 0.36cvss 5.5epss 0.01

    An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app.

  • CVE-2017-13841MedNov 13, 2017
    Apple Inc.
    macOS
    risk 0.36cvss 5.5epss 0.01

    An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app.

  • CVE-2017-13840MedNov 13, 2017
    Apple Inc.
    macOS
    risk 0.36cvss 5.5epss 0.01

    An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app.

  • CVE-2017-13836MedNov 13, 2017
    Apple Inc.
    macOS
    risk 0.36cvss 5.5epss 0.01

    An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app.

  • CVE-2017-13828MedNov 13, 2017
    Apple Inc.
    macOS
    risk 0.36cvss 5.5epss 0.01

    An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Fonts" component. It allows remote attackers to spoof the user interface via crafted text.

  • CVE-2017-13823MedNov 13, 2017
    Apple Inc.
    macOS
    risk 0.36cvss 5.5epss 0.01

    An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "QuickTime" component. It allows attackers to bypass intended memory-read restrictions via a crafted app.

  • CVE-2017-13822MedNov 13, 2017
    Apple Inc.
    macOS
    risk 0.36cvss 5.5epss 0.01

    An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Quick Look" component. It allows attackers to bypass intended memory-read restrictions via a crafted app.

  • CVE-2017-13821MedNov 13, 2017
    Apple Inc.
    macOS
    risk 0.36cvss 5.5epss 0.01

    An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "CFString" component. It allows attackers to bypass intended memory-read restrictions via a crafted app.

  • CVE-2017-13818MedNov 13, 2017
    Apple Inc.
    macOS
    risk 0.36cvss 5.5epss 0.01

    An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app.

  • CVE-2017-13817MedNov 13, 2017
    Apple Inc.
    macOS
    risk 0.36cvss 5.5epss 0.00

    An out-of-bounds read issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows local users to bypass intended memory-read restrictions.

  • CVE-2017-13810MedNov 13, 2017
    Apple Inc.
    macOS
    risk 0.36cvss 5.5epss 0.00

    An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows local users to obtain sensitive information by leveraging an error in packet counters.

  • CVE-2017-13804MedNov 13, 2017
    Apple Inc.
    tvOS
    risk 0.36cvss 5.5epss 0.01

    An issue was discovered in certain Apple products. iOS before 11.1 is affected. macOS before 10.13.1 is affected. tvOS before 11.1 is affected. watchOS before 4.1 is affected. The issue involves the "StreamingZip" component. It allows remote attackers to write to unintended…

  • CVE-2017-13782MedNov 13, 2017
    Apple Inc.
    macOS
    risk 0.36cvss 5.5epss 0.01

    An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a /dev/dtracehelper attack involving the dtrace_dif_variable and dtrace_getarg…

  • CVE-2017-7150MedOct 23, 2017
    Apple Inc.
    Mac OS X
    risk 0.36cvss 5.5epss 0.00

    An issue was discovered in certain Apple products. macOS before 10.13 Supplemental Update is affected. The issue involves the "Security" component. It allows attackers to bypass the keychain access prompt, and consequently extract passwords, via a synthetic click.

  • CVE-2017-7143MedOct 23, 2017
    Apple Inc.
    Mac OS X
    risk 0.36cvss 5.5epss 0.00

    An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "Captive Network Assistant" component. It allows remote attackers to discover cleartext passwords in opportunistic circumstances by sniffing the network during use of the…

Page 100 of 186